decane-connect-kit 2.25.0 → 2.26.1

package/dist/index.d.cts

@@ -308,7 +308,13 @@ interface SignTypedDataRequest {
     message: Record<string, unknown>;
     primaryType?: string;
 }
-type SdkEvent = 'connected' | 'disconnected' | 'session-expired' | 'session-started' | 'wallet-creating' | 'wallet-unlocking'
+type SdkEvent = 'connected' | 'disconnected' | 'session-expired'
+/**
+ * The access token was renewed while the user was active, so the session
+ * continued instead of ending. Informational: apps that cache the token need
+ * to re-read it, most do not.
+ */
+ | 'session-renewed' | 'session-started' | 'wallet-creating' | 'wallet-unlocking'
 /**
  * Emitted when this wallet could not be enrolled for server-assisted
  * recovery. Not fatal — the wallet works — but until it is enrolled the user
@@ -737,6 +743,16 @@ declare class ApiClient {
         token: string;
         expiresInDays: number;
     }>;
+    /**
+     * Trade a still-valid token for a fresh one, so an active user is never
+     * signed out mid-use. The backend caps the whole chain by session age, so
+     * this cannot renew forever; a 401 means "sign in again", not "retry".
+     */
+    refreshAccessToken(jwt: string): Promise<{
+        jwt: string;
+        expiresIn: number;
+        sessionExpiresIn: number;
+    }>;
     /** Redeem a decrypted unlock token for a session. */
     exchangeUnlockToken(token: string): Promise<{
         jwt: string;
@@ -916,6 +932,13 @@ interface SocialConfig {
      * see it for what a device gives up until then. Default false.
      */
     deferDeviceProtection?: boolean;
+    /**
+     * Resume a live session in a new tab, not only after a reload. Default false.
+     * See the same option on the headless config for the security trade: the
+     * session handle is the signing credential, so this widens where it can be
+     * read from one tab to the whole origin.
+     */
+    resumeSessionAcrossTabs?: boolean;
     /**
      * Offer to save a recovery-share file at signup. **Default false** since
      * 2.7.4 — opt in explicitly with `true`.

package/dist/index.d.ts

@@ -308,7 +308,13 @@ interface SignTypedDataRequest {
     message: Record<string, unknown>;
     primaryType?: string;
 }
-type SdkEvent = 'connected' | 'disconnected' | 'session-expired' | 'session-started' | 'wallet-creating' | 'wallet-unlocking'
+type SdkEvent = 'connected' | 'disconnected' | 'session-expired'
+/**
+ * The access token was renewed while the user was active, so the session
+ * continued instead of ending. Informational: apps that cache the token need
+ * to re-read it, most do not.
+ */
+ | 'session-renewed' | 'session-started' | 'wallet-creating' | 'wallet-unlocking'
 /**
  * Emitted when this wallet could not be enrolled for server-assisted
  * recovery. Not fatal — the wallet works — but until it is enrolled the user
@@ -737,6 +743,16 @@ declare class ApiClient {
         token: string;
         expiresInDays: number;
     }>;
+    /**
+     * Trade a still-valid token for a fresh one, so an active user is never
+     * signed out mid-use. The backend caps the whole chain by session age, so
+     * this cannot renew forever; a 401 means "sign in again", not "retry".
+     */
+    refreshAccessToken(jwt: string): Promise<{
+        jwt: string;
+        expiresIn: number;
+        sessionExpiresIn: number;
+    }>;
     /** Redeem a decrypted unlock token for a session. */
     exchangeUnlockToken(token: string): Promise<{
         jwt: string;
@@ -916,6 +932,13 @@ interface SocialConfig {
      * see it for what a device gives up until then. Default false.
      */
     deferDeviceProtection?: boolean;
+    /**
+     * Resume a live session in a new tab, not only after a reload. Default false.
+     * See the same option on the headless config for the security trade: the
+     * session handle is the signing credential, so this widens where it can be
+     * read from one tab to the whole origin.
+     */
+    resumeSessionAcrossTabs?: boolean;
     /**
      * Offer to save a recovery-share file at signup. **Default false** since
      * 2.7.4 — opt in explicitly with `true`.

package/dist/index.js

@@ -2193,6 +2193,17 @@ var ApiClient = class {
       headers: { Authorization: `Bearer ${jwt}` }
     });
   }
+  /**
+   * Trade a still-valid token for a fresh one, so an active user is never
+   * signed out mid-use. The backend caps the whole chain by session age, so
+   * this cannot renew forever; a 401 means "sign in again", not "retry".
+   */
+  async refreshAccessToken(jwt) {
+    return this._request("/auth/refresh", {
+      method: "POST",
+      headers: { Authorization: `Bearer ${jwt}` }
+    });
+  }
   /** Redeem a decrypted unlock token for a session. */
   async exchangeUnlockToken(token) {
     return this._request("/auth/unlock-token/exchange", {
@@ -3952,6 +3963,7 @@ async function createDecaneConnect(config) {
     clearSessionPersist(SESSION_KEY);
   }
   let accessTokenExpiry = null;
+  let tokenRefresh = null;
   function scheduleAccessTokenExpiry(jwt, expiresAt) {
     if (accessTokenExpiry) clearTimeout(accessTokenExpiry);
     accessTokenExpiry = setTimeout(() => {
@@ -3961,6 +3973,40 @@ async function createDecaneConnect(config) {
       dropLiveSession();
       events.emit("session-expired");
     }, Math.max(0, expiresAt - Date.now()));
+    scheduleTokenRefresh(jwt, expiresAt);
+  }
+  function scheduleTokenRefresh(jwt, expiresAt) {
+    if (tokenRefresh) clearTimeout(tokenRefresh);
+    const lifetime = expiresAt - Date.now();
+    if (lifetime <= 0) return;
+    const at = Math.max(5e3, lifetime * 0.75);
+    tokenRefresh = setTimeout(() => {
+      tokenRefresh = null;
+      void renewAccessToken(jwt);
+    }, at);
+  }
+  async function renewAccessToken(expected) {
+    if (auth?.jwt !== expected) return;
+    if (typeof document !== "undefined" && document.visibilityState === "hidden") {
+      const onVisible = () => {
+        document.removeEventListener("visibilitychange", onVisible);
+        if (auth?.jwt === expected) void renewAccessToken(expected);
+      };
+      document.addEventListener("visibilitychange", onVisible);
+      return;
+    }
+    try {
+      const { jwt: fresh } = await api.refreshAccessToken(expected);
+      if (auth?.jwt !== expected) return;
+      auth = { ...auth, jwt: fresh };
+      const freshExpiry = decodeAccessToken(fresh)?.expiresAt;
+      if (freshExpiry) {
+        scheduleAccessTokenExpiry(fresh, freshExpiry);
+        persistLiveSession();
+      }
+      events.emit("session-renewed");
+    } catch {
+    }
   }
   if (persistSession) {
     const saved = loadSession(SESSION_KEY) ?? (LEGACY_SESSION_KEY !== SESSION_KEY ? loadSession(LEGACY_SESSION_KEY) : null);
@@ -7550,6 +7596,7 @@ function DecaneKit({ config, children }) {
       rpcUrls,
       requireAssertionPerSignature,
       deferDeviceProtection,
+      resumeSessionAcrossTabs,
       // Recovery callbacks. Forwarding these is what makes recovery
       // configurable at all from <DecaneKit>; before, they were silently
       // dropped and the headless client was constructed without them.
@@ -7571,6 +7618,7 @@ function DecaneKit({ config, children }) {
       promptUnlockPassword,
       requireAssertionPerSignature,
       deferDeviceProtection,
+      resumeSessionAcrossTabs,
       offerRecoveryAtSignup,
       onRecoveryShareOffer,
       onRecoveryFileReady,